
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File: Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier: qWirAZGRUNBY9rXBUG/6S4ru88LwgMJDywwfUQgW1xo=
Subject key identifier: 37:93:21:21:32:7F:F9:F5:54:95:30:CF:5E:08:C9:BD:21:F7:EE:AA
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer: /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number: 94
Signing time: Mon 21 Sep 2026 04:40:50 +0000
Manifest this update: Mon 21 Sep 2026 04:40:49 +0000
Manifest next update: Mon 28 Sep 2026 04:40:49 +0000
Files and hashes: 1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: AqfgOpPyL+iD1xupmIMvC3Ti9inDM3436tfKR288OSM=)
2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: My8bbZyTvpN44ycJe7YDuAWa7grPMOBDyAIg81uBjQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Validity
Not Before: Sep 21 04:40:49 2026 GMT
Not After : Sep 28 04:40:49 2026 GMT
Subject: CN=6ab0b551-5f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:60:c0:c8:0e:6c:25:3b:24:0c:39:cb:cc:
12:b3:47:a1:8b:16:b8:df:75:95:83:17:25:be:60:
79:7f:3b:f3:98:59:f3:52:ec:fb:f0:8b:47:39:2e:
67:9b:1c:6d:72:82:59:ae:46:e6:eb:ac:31:ee:22:
5d:32:3e:97:e3:4a:88:7e:67:07:99:7a:2c:21:1c:
2f:47:79:2b:9a:86:20:84:d9:9e:25:8f:6f:f6:ce:
ba:35:1f:40:43:03:bc:88:9b:01:a0:39:9e:95:aa:
7f:f0:73:ba:89:9a:74:1b:0d:9f:d9:dd:b7:0e:07:
b6:92:22:24:7c:74:4a:d1:13:7f:b5:7c:8b:a5:2a:
d4:27:de:7c:dc:a2:a7:90:5e:24:a8:19:50:a2:ed:
05:30:3a:0a:15:31:f5:16:14:8f:53:6f:cb:d9:45:
5e:f9:c4:50:39:f5:9b:31:79:4a:60:1f:ee:a2:c4:
36:94:71:1a:d1:0c:ea:b0:d7:da:09:09:43:df:a7:
e6:3c:d5:6d:b2:2c:bb:13:07:75:91:3b:08:cf:2d:
12:a5:12:d8:41:4f:ab:45:10:63:8f:6a:08:8a:be:
d5:20:20:b6:79:ed:bf:90:14:30:54:39:80:92:8c:
68:3b:f0:85:49:95:00:b2:22:c8:b2:17:f1:59:55:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:21:21:32:7F:F9:F5:54:95:30:CF:5E:08:C9:BD:21:F7:EE:AA
X509v3 Authority Key Identifier:
keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ea:35:71:e3:fb:6c:f9:a4:23:e4:01:6b:87:91:13:66:aa:
7a:46:54:e6:9a:6d:76:d3:a4:a2:92:68:86:13:a7:83:ab:b1:
da:da:81:79:14:c2:c7:4f:23:9e:fc:c4:53:a6:c8:4f:0f:37:
f0:ee:7d:d3:0f:21:b5:54:44:63:a4:23:e6:9c:e9:5a:af:64:
4d:5e:22:b6:bb:be:24:e0:a1:93:dd:26:22:5a:44:48:92:39:
1a:6d:67:d8:90:34:c7:fa:ad:f7:c4:a6:6f:58:66:1e:e7:b1:
f8:0f:3b:e8:13:19:74:40:9c:38:ae:3d:17:2d:40:17:8a:70:
ec:68:7d:92:bd:bf:4f:9a:06:3c:56:de:e5:84:b2:94:10:87:
29:68:69:35:25:7a:e5:ba:af:00:7f:9c:e5:24:44:40:ff:8b:
9e:e7:13:03:92:87:13:fd:fa:5f:b9:ab:b0:bf:c2:7c:67:f1:
d3:71:07:39:84:7a:a1:c2:c4:d4:3d:c6:c4:72:4b:df:57:5d:
09:02:df:b1:58:b2:2c:c4:17:05:8f:79:a4:6a:63:ba:86:f2:
c5:9b:35:c1:ac:db:49:44:d1:1c:5f:6b:33:c5:e3:a3:a3:fa:
58:9b:c1:e2:78:2a:2e:1e:b4:df:4d:4c:88:41:92:d5:53:5c:
67:69:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:26:18 2026 by rpki-client